ISO 45001 IOSH Highlands & Islands Branch Evolution of OHSMSs 6th September 2018 Dr Karen McDonnell CFIOSH Chartered FCIPD PIEMA Head of RoSPA Scotland, Past President IOSH

ISO 45001 Outline Why is a new standard needed? Background to OHSMSs International standards and ISO 45001 ISO 45001 vs OHSAS 18001 Making it happen

“Good leaders don’t create followers – they create more leaders.” ISO 45001 “Good leaders don’t create followers – they create more leaders.” Source: Tom Peters These ‘leaders’ can be anywhere within an organisation, ‘we’ create the conditions for people to take ownership and for them to have a voice. Ownership should extend to all standards/processes within the organisation not simply OHS related standards. Should encourage a holistic approach to performance improvement aligning personal and organisational thinking.

ISO 45001 Global toll 2.78 million people killed by work accidents and disease 7,600 deaths per day (~ one every 12 seconds) 374 million non-fatal work accidents 2.4 million people killed by occupational disease ~ 4% of world GDP = work accidents and diseases Source: ILO 2017 Stark reminder of the voices silenced everyday. Only 10% of the working population in the developing world are effectively covered by health and safety regulation.

ISO 45001 Benefits of safety and health management Humanitarian (less work-related injury, illness and death) Business: productivity and profitability customer and worker loyalty reputation, resilience and results ‘Good ‘ work is good for you, your families, communities and Society as a whole. A global standard required to tackle global failure in OHS terms.

ISO 45001 Why is a new standard needed? Global toll of safety and health failures OHSAS 18001 – well used, but not an agreed international standard Alignment with other management standards 90,000 certifications in 127 countries. OHSAS 18001 not however a truly international concensus based standard.

1989 EU Framework Directive ISO 45001 Background 1989 EU Framework Directive 1991 HSG65 How it evolved How it relates to 18001

ISO 45001 Principles of OH&S management H&S should be considered integral to productivity, competitiveness and profitability Key factors for success: good leadership sound business processes trained and skilled workforce operating in an open and trusting environment

1989 EU Framework Directive ISO 45001 Background 1989 EU Framework Directive 1991 HSG65 1996 BS 8800 1999 OHSAS 18001 2008 BS 18004 2007 BS OHSAS 18001 2013 BSI proposal to ISO 2013 ISO approval 2018 ISO 45001 Historical background towards a BSI proposal to ISO in 2013…the creation of a new international standard using 18001 as a basis. Project committee established in which IOSH represented by Richard Jones were pivotal in the journey towards the launch of 45001 in March 2018.

World Standards Cooperation ISO 45001 International standards Consistency Inter-operability Conformity Safety Quality ISO ITU IEC World Standards Cooperation ISO originated in 1947 as a way to overcome technical barriers to international trade. ISO: International organisation for standardisation ITU: International Telecommunications Union IEC: International Electrotechnical Committee To ensure; Consistency Inter-operability Conformity Safety Quality

ISO 45001 Developments No clear approach to ISO 9001 structure – 20 discrete clauses Early 1990s user queried how it fitted together into a system ISO 9001 developed ‘process approach’, followed by ISO 14001 using PDCA Users asked why standards covered issues in different clauses and why some requirement were almost the same Additional indexing needed when incorporating both standards into overall systems Challenges No linkages between clauses …not easy to ‘see’ how all fitted together. Difficult to ‘read across’ between standards eg. ISO 9001 the Management Review clause is number 5.6 however in ISO 14001 it is clause number 4.6

ISO 45001 OHSAS 18001 – Annex A.1 Similar tables existed in ISO 9001 and ISO 14001 Table demonstrates the value of commonality indexing when seeking to incorporate standards into one organisational system.

ISO 45001 Management system standards Established: ISO 10006 – Quality in project management ISO 10007 – Configuration management ISO 15161 – Food safety (ISO 9000 and HACCP) ISO 19600 – Compliance management systems ISO 20000 – IT services ISO 20121 – Sustainable event management ISO 20400 – Sustainable purchasing ISO 22000 – Food safety ISO 22301 – Business continuity management ISO 26000 – Social responsibility ISO 27500 – Human centred organisations ISO 28000 – Security in the supply chain Existing management system standards

ISO 45001 Management system standards Established cont… ISO 30000 – Ship dismantling ISO 30300 – Records management ISO 31000 – Risk management ISO 37500 – Outsourcing ISO 39001 – Road traffic safety management ISO 45001 – Occupational health and safety ISO 50000 – Energy management ISO 55001 – Asset management ISO/IEC Guide 73 – Risk management terminology IEC 60300 – Dependability IEC 62402 – Obsolescence management Existing management system standards cont’d

ISO 45001 Management system standards Under development: ISO/TR 18155 – Human resources ISO 18480 – Facilities management ISO 18788 – Private security ISO 21001 – Educational establishments ISO 37001 – Anti bribery management systems ISO/AWI 50501 – Innovation management Revisions: ISO 9001 – Quality ISO 14001 – Environment ISO/IEC 27001 – Information security management

ISO 45001 Standardising the standards ‘Annex SL’ to develop/revise standards Same high-level structure (clause titles/sequence) Recent changes. Since 1947 ISO had accumulated multiple definitions of common terms 328 definitions of ‘organisation’ 145 definitions of ‘management system’. Annex SL provides identical core text , common terms and definitions. Commonality assisting the ‘read across ‘ between ISO standards.

ISO 45001 ISO 45001 clauses Scope Normative references Terms and definitions Context of the organisation Leadership [and worker participation] Planning Support Operation Performance evaluation Improvement

ISO 45001 Standardising the standards Aims to: reduce confusion/inconsistency enable integration of multiple certifications ‘Annex SL’ to develop/revise standards Same high-level structure (clause titles/sequence) Identical core text (+ topic variations) Commons terms and definitions

ISO 45001 ISO 45001 progress 12 March 2018 2013 Publication Approval Enquiry Committee Preparatory Proposal 2013 6 stage process towards the publication of 45001 in March 2018. IOSH a category A liaison body , global recognition of ‘us’ being an organisation with a valuable contribution to make. A huge personal and organisational commitment by staff and members 4 consultation responses, drafted by Richard Jones, commented on by members Webinars, papers at conference ISO PC 283 now disbanded and a new technical committee established which will oversee the maintenance and review of 45001.

“No problem can withstand the assault of sustained thinking.” ISO 45001 “No problem can withstand the assault of sustained thinking.” Voltaire Voltaire a french philosopher perhaps the greatest literary figure in modern times. This quote reflects the work undertaken by PC 283 and the IOSH role as a category ‘A’ liaison body Also reflects our approach as professionals to tackling OHS and wellbeing challenges.

ISO 45001 The next few slides will focus on the content of 45001…however in my opinion ‘implementation’ of the standard is the challenge. Implementing is a ‘doing’ word- putting 45001 into effect and making it work Global yet can be applied locally When interpreted and proportionately applied will proactively improve employee safety.

ISO 45001 Aims of ISO 45001 Minimise risk of harm Provide platform for continual improvement Integrate safety and health Harm includes mental and physical health Integrate into business management system and processes.

Similar approach taken to that of OHSAS 18001 and HSG 65

Leadership and worker participation Performance evaluation ISO 45001 System diagram Scope of OHSMS Needs and expectations of interested parties Internal and external issues 4 Context of the organisation Plan Do Check Act 7 Support 8 Operation 6 Planning 5 Leadership and worker participation 9 Performance evaluation Intended outcomes of the OHSMS 10 Improvement Leadership & worker participation – commitment, policy, roles, responsibilities, accountabilities and authorities + consultation, etc Planning – setting OH&S objectives and the actions needed to achieve them Support – resources, competence, awareness, communication, documented information Operation – operational planning and action (inc. mgt of change, outsourcing, procurement and contractors, emergency preparedness, etc) Performance evaluation – measuring and monitoring, internal audit and mgt review Improvement – setting targets, investigating incidents and non-conformities, and taking corrective actions   Source: based on ISO 45001 Fig. 1

ISO 45001 Stakeholder confidence? “groups without whose support the organization would cease to exist” “the feeling or belief that one can have faith in or rely on someone or something” “the state of feeling certain about the truth of something” “a feeling of self-assurance arising from an appreciation of one's own abilities or qualities” What is a stakeholder Who are your stakeholders What do we mean by stakeholder confidence?

ISO 45001 ISO 45001 vs OHSAS 18001 Context Leadership Documented information More on: worker participation continual improvement hierarchy of control risk and opportunities compliance status supply chain KPIs worker participation – top management need to ensure more non-managerial participation and that they support leadership and contribution from others [which takes us back to the quote I used earlier about creating more leaders!] continual improvement – there is a requirement for continual improvement objectives and process hierarchy of control – there is emphasis on applying the ‘hierarchy’ at planning and operational stages, so that problems can be designed-out at the earliest stage risk management – this requires ongoing assessment of risks and opportunities, both for OH&S and for the OHSMS itself compliance status – requires a process to ensure that relevant legal and other requirements are taken into account, kept up-to-date and compliance status checked contractors, procurement and outsourcing – recognising the growth in these areas, there is a requirement for specific processes to safely manage these issues [remember the point I made earlier about only ~10% of the working age population in developing countries effectively covered by H&S regulation] performance evaluation – requires criteria against which evaluation takes place and for not only OH&S performance to be evaluated, but also of the efficacy of the system  

ISO 45001 Making it happen Arrived 12 March 2018 Overwhelming support for publishing OHSAS 18001 now withdrawn 3-year migration period Understand ISO 45001 requirements Identify and address gaps Certification bodies can help Remember while auditors will take a proportionate approach they will base thei decisions an the evidence presented/complied through interview. President and Founder of Global Solutions Inc Kathy Seabrook at launch of 45001 said ‘ if its not documented it’s a rumour’. When developing auditors in-house make sure to provide insights into ‘how to’ interview non-OHS specialists Implementing 45001 will necessitate change within an organisation, these changes need to be sustainable (where this means to be upheld or defended). No use trying to implement change that wont provide long term benefits or that easily falls to the wayside.

ISO 45001 What to do next Raise awareness Secure commitment Upskill as needed: Safety and health professionals Top management Auditors Ensure gender, language, culture, literacy are not barriers to understanding How do you accommodate risk perception across the life course of an employee young workers, transfer between roles, pre-retirement, arduous work? Workforce planning is climbing the agenda within the contaxt of an ageing global population and the importance of sustainable working lives.

ISO 45001 Opportunity to improve Good safety and health management systems and cultures help organisations to: prevent injury, illness and death improve reputation, resilience and results Take time to reflect on ‘rumour’ vs ‘reality’ as you progress towards ISO 45001. More often than not businesses feel they need to make changes which are not necessary or relevant to their needs To quote Martin Cottam at the launch of 45001 ‘ISO 45001 is to assist organisations to develop themselves as opposed to meeting the demands of auditors’.

Thank you Any questions? iso45001@iosh.com